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Interrogation Report of 
Uffz. HEINTZ WOLFGANG HERZFSLD 


I, Personal Da ta* • 

Prisoner was bom in Berlin, 14 Dec 1914, son of a patent law- 
yer of Jewish descent. He went to school in Frankfort -am-Ma i n from 1922 
to 1930 and then in Berlin where he was graduated in 1933* To enter the 
Technische Hochschule in Berlin, the prisoner was forced the join the 
National Sozialistischer Student enbundc Pie resigned in 1934 because 
membership in the Bund would have led to membership in the Nazi Party 
which, he claims, he did not desire because of his ■ descent.. 

He was conscripted in 1935 and served for 16 months with the 
3rd Motorized Reconnaissance Battalion at btahnsdorf. After service he 
joined the allegedly nonpolitical Ex-serviceman’s League and so was per- 
mitted to continue his studies. He received an engineering degree in 
physical chemistry in 1940 and was working on his doctor's degree when 
drafted. 

The prisoner travelled in England in 1934, 1935, 1937 and 1938. 
HijS family had hoped to move to England, but their plans were interrup- 
ted by the war. 


II. Operat i onal Experienc es 

I. After 14 months in the Army, most of it spent as an English 
interpreter, the prisoner was transferred, as a cryptanalysist, to the 
Inspection VIl/6 of the Oberkomms.ndo dec Heeres. He has drawn a dia- 
gram of the organization of this section from 1941-1943, reproduced be- 
low as Appendix I. P/W's activities may be tabulated as follows: 

TIME WORK 

Aug 1941’oJuly 1943 British Branch - British War Office Code 

(In addition worked on DSGaulle Central 
African Code and Trans-Jordania Frontier 


July - Oct 1943 

Oct 1943«Nov 1944 

Dec 1944-Jan 1945 
Jan 1945-Mar 1945 
Apr 2, 1945 


Force cipher during a stay at Athens, 
Jan - Sept 1942) 

Italian Branch - numerical codes with 
additives. 

Balkan Branch - Tito and Mihailovich 
traffic 

American traffic - Slidex 

Hospitalized 

Taken prisoner 


The work after Nov 1944 was lone in an R, I. Company. The shift 
from headquarters was a repercussion of the attempted assassination of 
Hitler in which a number of headquarter officers had been involved. 


2. The prisoner has written out three reports explaining the 
methods of breaking he employed. These reports are appended. Their 
contents may be summarized as follows: 

a) British War Office Code : 

1, Type of code; Numerical, four-figure groups enciph- 
ered by means of a subtractor. • The subtractor was a Reciphering Table with 
starting points indicated by five letter groups. Signatures and. addresses 
were concealed in body of text. The Code was fixed and the subtractor 
changed no more often than every fortnight. The Code book had been cap- 
tured (at Dunkirk and in Norway), 

2. Cryptanalysis; several messages with same indica- 
tor were superimposed. At any given point, sinoe the subtractor was the 
same, the difference in cipher text was an index to difference in code 
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groups. By starting at a point presumed to contain the signature in one 
message and by comparing the obtained difference with, a table of differ- 
ences of the most frequent code groups , an entry could be made, Extend.- 
ing the entry did not differ essentially from anagramming in depth. 
Eventually the British introduced "One Time Pads",, which defied solution, 

b) Mihailovic Traffic ; 

lo Type of traffic; Double transposition using same 
rectangle and transposition key for both encipherment s* 

2o Ciyp tana lysis; There ms no general solution. Ad- 
vantage was taken of stereotyped beginnings ‘and endings containing low 
frequency letters, Also, for a message of given length, there was little 
variation in .the width of rectangles used* After the correct width had 
been assumed, the columns could be located approximately and gradually 
fixed more precisely by extensive use of cribs., 

c ) Tito Traffic 

lo Type of traffics Numerical monoalpha bet ic cipher 
consisting of a one or two digit number substituted for each letter. A 
short repeating additive sometimes based on a key-word was U3ed for su- 
perenbipherment 8 

2* Cryptanalysis* The length cf the additive was de- 
termined by factoring repeats and the text written in raws of the length 
of the additive 0 A frequency count of each column was now made and the 
digits of the additive apportioned so as to reconcile the maxima of each 
column Q Where this ‘gave no cl ear-cut results, another column with a clear 
maximum was chosen for comparison and the proper additive fixed by consi- 
dering the square of the difference in frequency* Once the additive was 
removed, the monoalphabet was broken easily 0 
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Approximate Organization, of Inspektion 7/6 
Inspektion 7 (Nachrichten) Gruppe 6 ( Na chri cht en-Auf klaerung ) 

1941 - 1942 

Gruppenleiter: Major Mang* 

Stellv. Gruppenleiter; Reg, rat Bailovic 

Referate 

England UoSsA. Fra nce Italy Balkans Mathematical 

Analysis 

Ob, Inspa tfdfz Sdfz Hptm.D4*** Reg, rat Sdf K 

Zillman Steinberg Kuehn Fialla Bailovic Pietsch 

Noteworthy Assistants 


0 b o I nap. WacJatm. 

Liedtlce Mueller 
Sdfz 
Schulz 
SdfZ 
Liedtke 
Wachtm. 

S chi cht 
Freifrau 

v. Stael-Holstein 


Wachtm, Graf. Lt. v.» 

Efdzterhazy Denffer 
Uff. 

Schlinzigk 


Personnel Section; Hptnr, - - - 

Frau Richter 


‘‘‘Major Mettig took over this position at the end of 1942 and held 
it until July 1943 

!; '*Uffz Manaigo subsequently replaced Fialla 


1943 


During 1943 the full title of the section was changed 
to "Amtsgruppe Nachrichten, Nachrichten-Aufklaerung". Its general 
organization was as follows: 

In 7/6 (AGNNa) Major Lechner in charge 
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Organization of the Balkanreferat in 1943-1944 


Referatleiter * 0b o reg. rat Bailovic 
Stellv. Ref. ltr. : Sdfz Geiszler (not a cryptanalyst ; 

Vv'achtmo Eszterhazy handled cryptanalytic 
matters for him). 

Albania : JJffz* Herzfeld (p/w in question) 

Croatia (Army and Ustasa) § Uffzo Gchlinzigk (worked also on 

Polish traffic in 1943) 


Greece 

Hungary 

Rumania 

Yugoslavia 


tfachtm* Kleiner 
Uffzo Seper 
Wachtnu bchmidt 

a) Mihajlovic g TJffz. Glaner 

b) Tito s Uffz. Gradischnigo 


i. 
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INTERROGATION REPORT OF UFFZ-. KEINTZ WOLFGANG HER2FELD. 

Appendix II 
War Office Cypher 

The 4-figure code was used in the British lm ny, as can be proved, 
from 1940 - 1943 in traffic between Division Corps - Army. 

Two copies of the code were captured: 

1 ) In the Norway campaign - April 1 940 

2) Near Dunkirk - beginning of June 1940 

It is doubtful whether the British noticed the loss immediately 
or later on, but it is probable that they did D 
Construction of the code; 

Bart 1 in alphabetical order: 


A 

6043 


AO 

2554 


Ail (Anti-aircraft) 

0327 

(Figures are 

Action ABERDEEN 

8953 

chosen 

Anti 

6241 

arbitrarily) 

Anti-tank Aden 

6770 


Artillery 

701 2 


Astonish -ed, -ing Athens 

1044 


Attention 

9905 


Attorney 

2455 


etc. 



Part 2 in numerical order? 



100 code groups on a page 



e.g, 20 00 battery 

50 after 


01 advance 

51 much 


02 reach 

52 sergeant 


03 necessary 

53 howitzer 

etc. 


c,. 


In October 1941 I had to work on messages from the Middle East. As 
an example, the British used to encipher some of these messages as 
follows 

E nciphering on War Office Cypher * 

A) FROM - FORTRESS - COMMANDER TOBRUK - TO - 8TH - ARMY - 14TH - 

25 OCTOBER - PLEASE - SEND - PLANE - TO - EVACUATE - IT - HARVEY - 
Q - M ~ 21 2 - 

B) Addressed to - CIPHER OFFICER - 8TK - ARMY - FROM - CIPHER 

26 OFFICER - TOBRUK - 16TH - OCTOBER - X - MACHINE - OUT OF - 

ACTION - SEND - SPECIALIST - FOR - REPAIR - Q - M - / - 

305 - 

c) 7 th - ARMOURED - DIVISION - TO - 13TH - CORPS - 20 - OCTOBER - 

32 SENDING - YOU - ITALIAN - INTERPRETER - CPTN MASSIGLI 

PLEASE - SEND - ON - TO - GHQ - CAIRO - C - Q - / - 573 - 

D) Addressed to - 13TH - CORPS - 30TH - CORPS - AUSTRALIAN “ FORCE 

37 - AUSTRALIAN - BASE - FROM - 8TH - ARMY - 20TH - OCTOBER - URGENT 

- REQUEST - TO-REPORT - ON - EFFECTS - OF - NEW - ARM “ . “ 

COLONEL NE-AT-HE-RB-Y-R-P-/-33- 

E) TO - FORTRESS - COMMANDER - HAIFA - FROM - - MI - LP - AL - 

» 

43 20 - OCTOBER - CPTN LO-WT-OF-T - AND - LT BE - 

CK - IT - T - WILL - ARRIVE - HAIFA - BY -• PLANE - TO MORROW - 

AT - 15 - OO-HOURS - M - P. 87 - / - 22 - / - 10 - * 

F) Addressed to - 8TH - ARMY - VIA - VIA - 13TH - CORPS - FROM - 

N - Z - DIVISION - 1 8TH - OCTOBER - 18 - 00 - GERMANS - 

PREPARING TO - RETAKE OM - AR - . - REQUEST - SEND 

REINFORCEMENTS -E-0-/-751 - 

The British encypherer first of all wrote in the address, date and 
serial number in brackets at any arbitrary place in the text. This was 
intended to avoid stereotyped occurrences of the same message beginnings* 
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Names not appearing in the WOO and other words as well, were spelled out 
by splitting the word in question into bigrarns and encyphering them by 
a 2-figure substitution table 0 
For example: MILPAL 



00 - 



07 

Cr 

lit N 

21 

u 


01 A 



08 

H 

15 0 

22 

V 


02 B 



09 

I 

16 P 

23 

w 


03 C 



10 

J 

17 Q 

24 

X 


04 D 



11 

K 

18 R 

25 

Y 


05 E 



12 

L 

19 S 

26 

Z 


06 p 



13 

M 

20 T 

27 

1 

In front 

of the 2 

spelt 

out 

word he put in 

. the 

cypher text 

ying group: 









"•V.pell a 

word 

Of 

6 

letters 

(as in the 

case 

of Milpal) 

Spell a 

word 

of 

2 

letters 

0002 



ft I! 

IT 

if 

3 


TT 

0003 



t? Tl 

Tl If 

4 


T! 

0004 



1? 1? 

t! 

II 

5 


IT 

0005 



H rt 

if 

W 

6 


IT 

0006. 

etc. 



So the speller "MIIPAL" appeared like this in the cypher text: 


0006 1309 1216 0112 

Group 2627 "take 2nd interpretation of codeword" meant that of the 
following code group 

9438 = send, «ing, ~s 

the 2nd meaning i.e. "sending" was to be taken* 

Message encoded on WOO then had the figure text shown in Enclosure 1* 


Recyphers , ( = Recyphering by a deciphering table 1 ) 

Appendix 2 represents a page out of a recyphering table. It contains 
12 lines each having 5" 4-fugure groups and a 5-letter indicator at the 
beginning of every line* Of course this can just as easily be a 4- figure 
or 5-figure group* 
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The British encypherer then encyphered, for example* the code text 

figure 

of message A by using th§/row indicated by the group TODBA. (Enclosure 3). 

After this long symbolic subtraction of the code text from the part- 
icular portion of the subtractor table* he gets the final cypher text as 
transmitted by the w/T operator. 

Subtract or minus Book group = Cypher Texto 
i.e. S -3& =~C •• ■ 

Assume that an encypherer of the New Zealand Division has a message 
P to put into cypher at the same time and is* by chance* using the same 
page of the recyphering table for his subtractor* But he uses as his 
starting point the indicator DELNIo He then uses the section of the 
subtractor marked in ink. This is to some extent the same as that used 
for message A. (Appendix 3)* 

Decoding s 

In decoding the w/T text is subtracted from the recypher and the 
code text la produced. 

Subtractor minus Cypher Text = Book group 
S - C = B. 

The recypher was changed in the Middle East, approximately every 
3 weeks 9 later every 14 daysJJ 

Cryptanalysis . (being in possession of WOC). 

Let us assume that there are 5 W/T messages A - E in the material, 
spread over not too long a period, with one and the same indicator 
"TODBA". It is presumed that all five messages were recyphered with 
the same part of the subtractor. 

The 5 messages are written down underneath one another (Appendix 4) 
and it appears that between messages D and E there are 2 "clicks" having 
the same rhythm, i.e. they are equidistant from the beginning of the message. 
The appearance of such split repeats is a marked characteristic of recyphers. 


R 
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Assuming it 'was not known what cypher was the. basis of the recyphered 
figure text, it would be apparent from the appearance of such "clicks " 
that it was a 4- figure process, i^e, a code* This arises from the fact 

that the text as far as the start of the first "click " 9 is divisible by 
4, the "click" is 4 figures long and the text as far as the second "click" 
is a 4-figure group* 

Of course the material must be of sufficient volume and must be 
hollarithedo (Count of 4-* figure groups 3 examination of "clicks 11 ) 

Eliminatio n of the Re cyphe r 6 

If I have 2 messages A and B bearing the same indicator and thus 

showing that they are on the same recyphe:?, then B (in message A) and 

a 

B^ (in message b) being the book groups falling under one and the same part 
of the recypher result in 



By subtracting 1) - 2), I get B^ « B ri » - G * 


* (incorrecto Result is BL -* B *= \'C - CL ) 

K o a a b' 

i*e c The difference between the book groups is the same as the difference 
between the cypher texts of the '2 massages if they are under the same part 
of the subtractor table* 

All breaks into such systems are built up on this preservation of th o 
difference in spite of recyphering* ** 

** (This does not work with some Tito cyphers)* 

After this, all differences are extracted by Hollerith and tabulated 
for all cypher groups lying under the same section of the sub tract or table* 
There will be frequency peaks whose position will give an indication 
of the position of the address groups in the messages* A book group B a is 
given arbitrarily the* value, e*g« 0000 and the remaining book groups of 
a column are calculated. 


- B a = Ch - C a B a . GOTO 



Bb " B g = % - C c 

B c = B b (Ojj- - C c ) etc. 


By this means are obtained relative values for code groups based 
on C a = 0000, 

It should be observed also that the difference R - F a cannot only 

D a 

derive from code groups + B a but from any S other + B a , e.g. 

2345 = 3456 - 1111 and 4567 - 2222 

Actually any 4~ figure difference can be made in 10,000 different ways. 

But in the material investigated of course only the difference between 
frequent code groups will appear predominantly. 

Fortunately all these difficulties in establishing a relative code 
were circumvented by capture of 2 copies of the WOC (in Norway and 
Dunkirk) , 

We had a difference table prepared by Hollerith of the code groups 
which would probably appear most commonly in the addresses. We then 
proceeded as follows :- 4 

We began with column 18 of the cypher text because we assumed that 
a frequent address group would be the reason for the •'click 1 ' in this column. 
(The "click" in column 24 illustrates that this need not necessarily be the 
case). We extracted all differences between the cypher texts of messages 
A to E in this column and obtained these values 

A " B - 4773 
A - G - 3566 
A - DI - 4285 
A - Cl 

B - C - 1217 
B -D/E - 2152 
C -D/E - 3369 

Of each pair of differemces (A - B) and (B - A) the smaller difference 
was always chosen, i„e„ that under 5555* to save work, only these were 
Included in our dlfferer 
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We now found in our difference table, with others: 

(A - t>) - 4285 = 0749 - 6564 [)] - [from] 

= 3205 - 9020 [ Corps] - [H.Q.] 

It was necessary to investigate which of the two was more probable. Had 
0749? to be put in Message A or was it 6564 ? 

It follows from the equations on Page 14 that; 

C + B = S 
If I write in; 

in cypher text A 0619 and in D 439 4* 

+ 65 ^ 4 - - Ba -*» 0749 - Bd 

I arrive at "b!73 and 4453 

as the subtracter 

This is obviously wrong as the basic condition was that over 

Column 18 there should be the same subtractor for messages A and Do 

If I write them in the other way round; 

In the cypher text A 0619 and in D 4894 

+ 0749 = Ba '!• 6 564 = Bd 

I get the subtract or 0358 0358 

in both cases. 

This is therefore correct, 

I now calculate the code group in message B in Column 18, in 
accordance with the formula on page 14o 

S - C b - B b 
0358 - 6946 = 4412 

and that for message C:- 
S - C c = B c 
0358 - 7153 = 3205 

In the same way I now write down first the components of the second 

difference 3205 - 9020 (Corps) - (H 0 Q 0 ) in messages A and D and obtain :*• 

In cypher text A 0619 and in D 4894 
+ 3205 + 9020 

Sub&ractor 3814 3814 

Using these I arrive at; 


E b = s - C b - 3814 - 6946 = 7978 
and B c - S ~ C c = 3814 -■ 7153 '» 67 6 l 
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There is now a choice between: 4 

(A ~ D) = 4285 

= 0749 - 6564 = 3205 - 9020 

Subtractor 0558 38 14 


Ba 

= 

0749 

) 

B a = 

3205 

Corps 

Bb 

=■* 

4412 

16th 

B b = 

7978 

obvious 

Bo 


3205 

Corps 

B c = 

6761 

59 

Bd 

= 

6364 

from 

B d = 

9020 

HQ 

Be 


6564 

from 

B e = 

9020 

HQ 

As 

a 

criterion for deciding^ 

I have a look at 

the intercept date, 

most cfljsea this 

is the same , or 

the foil Giving day., 

as that 

contained 


the cypher text. 

For example, the intercepts are reported to be;~ 


Message 

A - 15 

October 

0450 hours 

ti 

B - 16 

Tt 

1800 " 

It 

O 

CNJ 

1 

O 

tt 

1530 " 

tt 

D - 21 

II 

0025 ” 

IT 

E - 20 

It 

1915 " 

tt 

F - 19 

tt 

0120 " 


I then notice at once that = 4412 = 16th in the left-hand column 
tallies with the intercept date of message B« I shall decide, therefore, 
on subtracter 0358 for column 18 and the values on the left side. 

If the group Bfo = l6th is actually the date group in message B, then I 
look for book group 6315 = (Oct) in column 17 or 19 • This is then written 
in as a try-out and the result is: 

Column 17 Column 19 


^5629 C b 5754- 

B +6315 B +6315 

Subtractor 19 34 IO69 


I now calculate the book groups for column 17: 
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Column 17 


S -* C a = 


Column 19 


C = 


1934 

- 8281 = 3753 

Ordnance 

1069 

- 2124 = 9945 

evacuate 

1934 

- 5629 = 6315 

Oct # 

1069 

- 5754 = 6315 

Oct 0 

1934 

- 6726 = 5218 

material 

1069 

- 0093 = 1076 

C 

1934 

- 7727 = 4217 

already 

1069 

- 8047 = 3022 

8 th 

1934 

- 4556 = 7408 

North 

1069 

- 1063 = 0006 

spell a word 


6 letters 

The decision in favour of Column 19 is not difficult as the combinations; 
Ordnance ) 

Oct » l6th 


Material 

already 

North 


Corps 

from 

from 


are most improbable, whereas 

) evacuate 

16th 
Corps 
from, 
from 


Oct, 

C 

8th 

spell a word of 6 letters 
immediately suggests "from the 8th Army"* 

I therefore try out "Army" book group 1037 in column 20 in message 
D and get; 

C d = 4637 

+B = 1037 
Subtractor (col, 20) 5664 

S - Ca = 5664 - 6553 = 9111 Lieutenant 

- 3677 = 2097 )• (bracket end 0 Fullstop) 

- 3459 = 2215 Q 

~ 4637 = 1037 Army 

- 4365 = 1309 M, I (spelling place). 
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So that in 3 columns 18 

- 19 - 

20 I have; 


Message A 

) 

evacuate 

Lieutenant 

B 

16th 

Oct* 

). 

C 

Corps 

C 

Q 

D 

from 

8th 

Army 

E 

from 

spell 6 

M I 

letters 

By getting MI, I assume immediately that 

it is MILPAL and thus obtain 

columns 21 and 22, etc. 

I can fill in the text of 

the message 

without difficulty as far as 


addresses extend, i.e. from Columns 5 to 33 and, as message D ends in a 
fr click", even up to column 35* The filling in of Columns 1-4 would 
present considerable difficulties if message & did not begin with a 
speller. I cannot reconstruct the remainder of message E from Column 
36 on. 


I therefore look through my messages for one which falls under a 
different indicator, yet at the same time, comes partly under the recjipher 
having TODBA as its indicator 

pot this purpose, I must act on the assumption that a message, falling 

* 

under Columns 20 - 25 of my recypher, if it contains the code group 

0000 = . (fullstop) in one of these columns, must contain at this place the 

cypher text group: 

^ S'^r B ~ S - 0000 = 
in the column: 


i. e. 

20 

21 

22 

23 

24 

25 


1069 

5£)64 

8549 

7299 

63'Bo 

or 7003 

( 

20 

21 

22 

23 

24 

25 ) 

(i.e. 

1069 

5664 

8549 

7299 

638O 

7003) 


As the starting points of both recyphers can only vary by 5* 10, 20 etc. 
recypher groups, then the one in messages having a different starting indi- 
cator, if they are based on code group 0000 = . "fullstop", can only appear 
at the 6, 11, 16, 26, 31, 3&th place, in other words they must run 
at intervals of 5« 
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I therefore orrunge my JIo.l] ei'ith voraion of* th© cypher groups in 3 
interval sets or phases: 


Phase I 

II 

III 

IV 

V 

Contains all 1 

2 

X 

J 

A 

5 

6 

7 

8 

9 

10 

11 

12 

■ 13 

_u 

i — i 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

26 

27 

28 

29 

30 etc 

cypher groups* 

Prom ry tabulation 

I see 

that 

in message p at position 11 (in phase 1), 


the group " 5664 " also occurs. I write in this message under messages A — E 
(Enclosure 3) so that group 11 falls under the 21st group of these 
messages (Enclosure 4)0 

I now subtract the adjacent groups to group 5 654 of the cypher text 
of message p from the recypher obtained from messages A - E and get the 
following text; 


Subtractor 

0358 

1069 

5664 

8549 

7299 

638 O 

7003 

P 

CD 

CT\ 

1951 

5664 

0864 

9579 

3368 

6076 

Giving: 

1513 

0118 

0000 

8785 

8720 

3022 

1037 


? 

? 

c 

( 

Addres 

sed to 

8th Army, 


On looking at positions 1 and 3 of the two groups 1513 and 0118, a speller 
is suggested, which would be "OMAR’V Furthermore-, in the case quoted, I 
know in each case the whole recypher from Column 1 of message p to column 23# 
Without any great difficulty the rest of the recypher from Column 36 
to Column 43 can be obtained from message E and message p. 


Further Analysis of the WOC System and its Cryptographic Handling. 

After the capture of .the / a r Office Cypher in the early summer of 1940, 
the English Section under Oberinspektor LIEDTKE was successful in establishing 
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tho use of the WOO in North Africa in the spring of 19 Al, in ooriinnotion 
with Reciphering Table (sic) and 5 letter indicators* 

A considerable volume of messages was read, especially during the 
British Cyrenaica offensive under General Wavell(8th Army) in March* 
Organisation of the base services and Order of B a ttle of the Arny were 
recognised or earlier results were confirmedo During late summer Roramels 1 
counter-attack took place, leading to the siege of Tobruk* The besieged 
fortress was solely dependent on W/T for its signals communications to 
8th Army and Cairo. It used almost exclusively the WOO and Reciphering 
Table, primarily with 5-letter indicator and 5 or 6 subtractor groups per 
line (i 8 6o when the messages were tabulated giving phases or intervals of 

5 or 6) t It then went over to 4-figure indicators,. But as it continued 
to repeat the indicator occupying the first position at the end of the 

message in clear^. it was not difficult for German cryptographers to 
recognise that the cypher was, in fact, the same one Q 

To break the address, it was only necessary in most cases to have two 
messages with the same indicator, and to break the text of the message, 

3-4 messages o 

During the 8th Amy's relief attempts in November 1941, which led to 
the cutting off of Rommel between Tobruk, Bir Omar and Solium and his famous 
break-out to the West at sidi Rezegh, we were able to follow accurately 
this development and the British units taking part in it 9 

Our skill suddenly gave out at the middle of December; a few messages 
could be broken again at the end of December, and then by the middle of 
January '12, all our attempts at an entry were fruitless. 

At this time I was sent to Athens to N a chr„ Aufkl* Regt. 4 with a 
party of 8 cryptanalysts. Rommel was in the Ain-el-Gazala position and was 
preparing his May offensive. We were quite unable to break into the 
plentiful traffic bearing 4-figure indicators during the months of February, 
March and April and so to give Rommel greater intelligence on the rearward 
organisation of the eneiry* 
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DECLASSIFIED 
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o 


18, 


1 


It was only arte ^ jiy return to Benlin in October/Dovember 1942 that 
I succeeded in doing what could have been done without difficulty in 
December f Z#JL, if only there had been the necessary cooperation in the 
English section and a larger number of cryptanalyst had been available 
Simultaneously with the use of 'the WOC with Reciphering Table and 
4- figure indicators * the British were using at home for training and prac- 
tice purposes during the autumn and winter of 1941$ the WGC with Recipher- 
ing Table and 5-letter indicators© In fact in the whole of the British 
Isles, they were using only one single Reciphering Table and kept it in 
force for months until 1/1/42 J As against this, in Africa they changed 
their Keciphering Table every 14 or 21 days 9 

When I took over the work on the material in October 1942, I retrieved 
first of all the messages our intercept Operators had picked up in the 
autumn of ’41 and which number several hundreds© At that time (end of 
*41) these were hot worked on and classified as practice traffic no-one 
wanted. A fundamental error,! In cryptanalysis absolutely everything 
produced by the enemy must be worked on and utilised., 

I found 5 messages with the same 5-l Q b-ter indicator and at one* place, 
with our old address group ("from" = 6564 ) made a break-in which looked 
approximately like this: 


L/0±e> ^ 1\J j 

Message A of 6/12 from 

B 15/12 Division 

C " 18/12 Canadian 

D " 22/12 blank group a 

E ” 23/12 23rd. 


I at once decided that we had here Canadian troops, possibly divisions 
in U*K« and received confirmation from the Evaluation Section that the 1st, 
2nd and 3rd Canadian Divisions were stationed in S#E. England. 

I assumed that in Col (N + 1) the word "Division" would occur after 


"Canadian" and obtained? 
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)< ( 35^5 

^aRa Date Jblnj I ( 


19 . 



A from 2nd 

B Division blank group A 
C Canadian Division 


D bla nk group A is 
E 23rd blank group B 

Prom this I’ set up message A according to the old Y/OCa The "blank group 
A" (a code group of WOC not allotted a meaning), had obviously been 
given the meaning "from" in messages taken after 15 / 12 0 I was able to 
establish that the British had now filled in, of the approximate 500 
blank groups in the W0C:~ 


5 different ones with ( 


5 


n >1 


II I! \ 

)• 

” " " "from” 

" 11 " "addressed to" 

" " " o Pullstop 

" ,f " - -bash of hyphen 

~ in fact just those groups we always used as a starting point when 
fixing the position of the address* 

I also established that as from 1 / 1 / 42 , a new recyphering table was 
being used, which ran throughout the year, so that in November *42 there 
were, for instance, 15 messages all using the indicator HABQY. 

Prom this, it was deduced correctly that the speller-indicating 
groups and the substituion table for vrords not included in the WOC had 
been altered too 0 e a g P 


5 

5 

5 

and 5 


50 

- 

57 

G 

74 

N 

91 

U 

51 

A 

58 

H 

75 

0 

92 

V 

52 

B 

59 

I 

76 

P 

93 

w 

55 

C 

70 

J 

77 

Q 

94 

X 

54 

D 

71 

K 

78 

R 

95 

Y 

55 

E 

72 

L 

79 

S 

96 

Z 

5-3 

P 

73 

M 

on 

m 

97 

I 
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By dbing this, the objection was avoided of having differences appearing 
between speller passages in 2 messages on the same recypher, where their 
1 and 3 positions lay between O and 2 and immediately suggested speller 
passages, 

Bor example: 


Message A 

Spell 6 

Mi 

IP 

AL 


0006 

1309 

1216 

0112 


Spell 5 

DE 

RN 

A- 


0005 

0405 

1812+. 

0100 

Difference 

0001 

1901- 

0402 

0012 


The difference remains constant even when recyphering is done with 
the same subtractor table* all these discoveries could have been made in 
December or January *42 if work had gone on uninterruptedly on UcKo traf- 
fic and would have made possible the further exploitation of WOC traffic 
in North Africa* 

Meanwhile, the turn in the tide in North Africa had occurred at 
El Alamein in October *42 and in November the 1st U*S# Army landed in 
Morocco and Algeria, There was a little traffic and we also set 

3 messages with the same indicator (5-letter), However volume was too 
small to enable successful exploitation* 

Prom December *42 until March ’43 the British switched' over to the 

use of 4-figure ■ indicators which were recyphered. For this they used a 
recypher derived from the groups contained on tha last page of their 
Reciphering Table, Let us assume Enclosure 2 represents the last page. 
The British numbered the recypher groups on this page 01, 02, etc. If 
the indicator 7483 had to be recyphered, they chose, for example, the 
23rd group 9782 as the indicator recypher and obtained; 

7483 
’+ 9782 


6165 as the recyphered indicator 


REI 
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They disguised .the tr 23 M as a recipher rcferemvo by using a grou^ 
having a letter, first and at th© aooond and 5 plane? an arbitrarily 
chosen figure, $»£*: 



G5234 

The Tfr message then began;- 

G5234 6165 #». 4-figure text . 6165 G5234* 

Dealing with such an indicator recypher presented no difficulty 
with the plentiful supply of practice traffic originating in home 
t err it cry o 

Hollerith tabulation gave the following picture with 3 messages; 

Indicator 


A) G 

5234 

6165 

7843 

■ 2195 

2873 

9561 

7833 

B) B 

2651 

2117 

0514 

2193 

2873 

6299 

7833 

C) P 

8236 

6165 

9192 

4893 

2873 

6299 

7833 


Obviously A, B and C were recyphered with the same subtractor and as A) 
and C) show the same recyphered indicator group, then only the £3 in 
message No, 1 can be the reference,, 

We now assumed an arbitrary recypher figure of 1111 for the reference 
figure 23 and subtracted it from 6165 # We thus obtained then the relative 
indicator group 

6165 
- 1111 
5054 

Then, as the group !, 5054 !l must also be contained in the recyphered 
indicator n 2117 n in message B, we get: 

2117 
- 5054 

7163 - the relative recypher for reference No, 65 
(from B 2651) 

Prom further matched-up pairs of messages, (matched by reason of 
"clicks" ), we finally compiled a complete "Relative Recypher T a ble M by 
using which we could eliminate the indicator recypher without difficulty 
and could establish which messages had the same (relative) indicator. 



- Bfc " (^b ” C c ) e-t;c « 


J 


By this means are obtained relative values for code groups based 
on CL = 0000., 

a* 


It should be observed also that the difference cannot only 

derive from code groups Bb + B a but from any & other B^ + B a , e.g, 

2345 = 3456 - 1111 and 4567 - 2222 

Actually any 4~figure difference can be made in 10,000 different ways. 

But in the material investigated of course only the difference bet ween 
frequent code groups will appear predominantly. 

Fortunately all these difficulties in establishing a relative code 
were circumvented by capture of 2 copies of the WOO (in Norway and 
Dunkirk) . 

We had a difference table prepared by Hollerith of the code groups 
which would probably appear most dommonly in the addresses. We then 
proceeded as follows j- 

We began with column 18 of the cypher text because we assumed that 
a frequ&tvc address group would be the reason for the "click" in this column. 
(The "click" in column 24 illustrates that this need not necessarily be the 
case),, We extracted all differences between the cypher texts of messages 
A to E in this column and obtained these values:- 


A - B - 4773 
A - C - 3566 
A - DI - 4285 
A - Cl 

B - C - 1217 
B -D/E - 2152 

c -d/e - 3369 

Of each pair of differemces (A - B) and (B - A) the smaller difference 
was always chosen, i„e 0 that under 5555. to save work, only these were 
included in our difference table 
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ENCLOSURE 


Message A 


Pie ase 

send 

plane 

to 

( 

from 

Fortr. 

2530 

94-38 

7512 

1920 

8785 

6564 

1905 

Cdr. 

Tobruk 

to 

8th 

Army- 

Q 

M 

5075 

5510 

192© 

3022 

1037 

2215 

0758 

200+ 

12 

Oct 

14 th 

) 

evacuate Lt 

1177 

1925 

6315 

1501 

0749 

9945 

9111 

spell 6 

HA 

RV 

EX 




0006 

0801 

1822 

0525 





0 


Message 

B 



X 

machine 

out of 

action 

.6 

( 

Addr. to 

1719 

1 638 

0792 

4809 

0000 

8785 

8720 

Ciph.Gff. 

8th 

Army 

from 

Ciph.Gff. Tobruk Q 

96 01 

3022 

1037 

6364 

9601 

5510 

2215 

m' 

/ 

300+ 

c; 

16 th 

Oct 

). 

0758 

1013 

2520 

4163 

4412 

■ 6315 

2097 

Send 

specialist for 

repair 




9438 

4462 

OC97 

7102 





Message C 


Take 2nd 

sending 

you 

Italian interpret Captn 

spell 8 

enterpr. 







2627 

9438 

1246 

9394 

1177 

4537 

0008 

MA 

SS 

IC 

LI 

• 

( 

7 th 

1301 

1919 

0907 

1209 

0000 

8785 

1928 

Armoured 

Div. 

5 

13 th 

Corps 

C 

Q 

3437 

6720 

4163 

3066 

3205 

1076 

2215 

/ 

500 + 

73 

20th 

). 

Please 

send 

1013 

5406 - 

0377 

1484 

2097 

2530 

9438 

on to 

GHQ 

Cairo 





6224 

5919 

6 726 








Message D 



Urgent 

request 

to 

report 

effects 

new 

Arm 

7973 

8529 

1920 , 

7713 

8471 

0904 

4000 

• 

( 

Addr. to 

13th 

Corps 

30th 

Corps 

0000 

8785 

8720 

3066 

3205 

8944 

3205 

Australian Force 

Australian Base 

from 

8th 

Army- 

3732 

1665 

3732 

2065 

6564 

3022 

1037 

Oct 

20 th 

R 

P 

/ 

33 

) 

6315 

1484 

5074 

2214 

1013 

5046 

0749 

Colonel 

Spell 9 

NE 

AT 

HE 

RB 

Y- 

0358 

0009 

1405 

0120 

0805 

1802 

2500 
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ENCLOSURE 1 (oont) 


Message E 


Captn. 

4537 

spell 7 
0007 

Lt • 

9111 

spell 7 
0007 

to 

1920 

Fortr. 

1905 

LP 

1216 

AL 

0112 

/ 

1013 

10 

1097 

HAIFA 

5256 

by 

7299 

hours. 

9043 



Germans 

take 2nd 
interpret 

2627 

spell 4 

OM ' 

0004 

1513 

Arrqy 

via 

1037 

1131 

Div 

E 

6 720 

4329 

Oct 

) 

6315 

0749 


Germans 

Take 2nd 


interpret 

3242 

2627 

spell 4 

OM 

0004 

1513 

Arrqy 

via 

1037 

1131 

Div 

E 

6720 

4329 

Oct 

) 

6315 

0749 


LO 

WT 

1215 

2320 

BE 

CK 

0205 

0311 

\ ' \ . • 

Cdr 

HAIFA 

5075 

5256 

% \ t 

■ * 1 \ 

M 

■ ■■■' "p • 

0758 

221 4 

Oct 

20 th 

6315 

-1484 

pldne 

•tomorrow 

751 2 

9782 



• V 

V 

i \ 

■'lies sage P 

preparing 

retake 

1717 


9502 

AR 



0118 


0000 

13th 


Corps 

3066 


3205 

O' . 


/ 

6691 


1013 

request 


send 

8529 


9438 


Message F 9 * 

preparing 

retake 

1717 


9502 

AR 


• 

0118 


0000 

13th 


Corps 

3066 


3205 

0 


/ 

669I 


1013 

request 


send 

8529 


9438 


OF 

1506 

T- 

2000 

ET 

0520 

T- 

2000 

\ • 

f rota 
6564 

spell 6 
0006 

87 

6388 

" / 

1013 

) • 

2097 

Will 

1.276 

; at 

7324 

15 

3263 


spell 3 

BI 

0003 

; "6209 

( 

8785 

Adr. to 
8720 

from 

6564 ■ 

N 

8887 

700+ 

7575 

51 

1990 

reinforcements 

3178 


spell 3 

BI 

0003 

0209 

( 

8785 

Addr. to 
8720 

from 

6564 

N 

8887 

700+ 

7575 

51 

1990 

reinforcements 

3178 


and 

0460 

( 

8785 

m 

1309 

'22 

0864 

arrive 

85°1 

00 

1538 


R- . 

1800 

8th 

3022 

Z 

0059 

18th 

4008 


R+ 

1800 

8th 

3022 

Z 

0059 

18th 

4008 


£0 AT THE N/ CHi /bS 


9 



ENCLOSURE 2 








01 



02 



03 



04 



05 


H 

A 

B 

Q 

Y 

0 

4 6 

0 

0 

9 4 

3 

1 

2 7 

4 

5 

4 8 

5 

2 

6 7 








06 



07 



08 



09 



10 


T 

0 

D 

B 

A 

3 

7 1 

9 

5 

1 2 

8 

3 

2 6 

3 

5 

9 3 

1 

7 

3 2 

4 s 







11 



12 



13 



14 



15 


r: 

X 

T 

K 

0 

8 

2 8 

2 

7 

6 1 

2 

6 

6 0 

3 

5 

2 0 

2 

1 

5 3 

8 i 







16 



17 



18 



19 



20 


D 

E 

L 

N 

I 

3 

1 7 

1 

3 

0 6 

7 

1 

9 1 

4 

4 

7 1 

4 

1 

2 4 

3 i 







21 



22 



23 



24 



25 


T 

K 

-tl 

R 

V 

E 

5 

4 4 

0 

8 

5 9 

4 

9 

7 3 

2 

0 

3 5 

8 

1 

0 6 

9 : 







26 



27 



28 



29 



30 


K 

E 

T 

T 


5 

6 6 

4 

8 

5 ,4 

9 

7 

2 9 

9 

6 

3 § 

0 

7 

0 0 

3 ! 

L 

U 

D 

R 

I 


9 7 

Q 

✓ 

3 

7 6 

0 

4 

9 7 

8 

1 

0 6 

5 

9 

4 8 

0 i 

M 

A 

S 

P 

A 

2 

3 7 

3 

1 

2 7 

6 

8 

5 0 

1 

0 

7 9 

6 

9 

8 5 

1 : 

Q 

E 

P 

T 

E 

8 

5 0 

9 

8 

5 1 

2 

1 

9 7 

6 

2 

9 4 

2 

7 

0 7 

4 

N 

I 

R 

B 

1 ! 

: 1 

0 3 

6 

9 

0 4 

3 

8 

3 8 

* 

o i 

3 

5 3 

8 

6 

1 6 

2 ; 

P 

0 

N 

M 

0 

8 

1 2 

7 

4 

0 3 

5 

2 

4 7 

4 

4 

1 9 

7 

2 

5 8 

5 

S 

u 

Q 

K 

U 

6 

4 2 

c; 

y 

2 

6 1 

7 

5 

2 0 

5 

6 

6 1 

3 

6 

9 3 

4 


\ 



ENCLOSURE 3 


Message A) 


Book groups: - 2530 

9438 

7512 

1920 

8785 

6564 

1905 

5075 

Recypher: + 371 9 

5128 

3263 

5931 

7324 

8282 

7612 

6603 

Cypher text; TODBA 1289 

5 790 

£?51 

4011 

9^49 

2728 

6717 

1638 

- 5510 

1920. 

3022 

1037 

2215 

0758 

1177 

1925 

+ 5202 

1538 

3171 

3067 

1914 

4714 

1243 

5440 

0792 

0618 

0159 

2030 

9709 

40SS 

0 T 7 S 

4525 

- 6315 

1501 

0749 

994 r > 

9111, 

0006 

0801 

1822 

+ 8594 

9782 

0358 

1 069 

5664 

8549 

7299 

6380 

2289 

8281 

0S19 

2124 

t 553 

8543 

7498 

55^8 


- 0525 
+ 7003 
7588 TODBA 


Message p) 


Book groups; 

Re cypher: 

Cypher text; DELNI 

3242 

3171 

0939 

2627 

3067 

1440 

1717 
191 4 
0207 

9502 

4714 

5212 

0003 

1243 

1240 

0269 

544-0 

5241 

1800 

8594 

7794 

0004 

9782 


1513 

0358 

9845 

10* 

0118 

1069 

1951 

0000 

5664 

5664 

8785 

8549 

0B64 

8720 

7299 

9579 

3022 

638° 

33b8 

15. 

1037 

7003 

B07S 

1131 

3979 

2B4B 


3066 

.3760 

0704 

3205 

4978 

1773 

6564 

1065 

5501" 

20 0 

8887 

9480 

TS03 

0059 

2375 

2326 

6720 

1276 

555^ 

4329 

8501 

4282 

6691 

0796 

4105 


25. 

1013 

9851 

8848 

7575 

8509 

1034" 

1990 

8512 

7622 

4008 

1976 

7978 

6315 

2942 

£637 

30. 

0749 

7074 

7335 

8529 

1036 

3517 

9438 

9043 

0615 


3178 

8380 

521 2 'DELNI 
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ENCLOSURE \ 

Message a) 




12§9 

6790 

7651 

4011 

9649 

2030 

9709 

4066 

0176 

4525 

8543 

7498 

5568 

7588 





Message B) 

2000 

4590 

3571 

1132 

7324 

bU66 

6404 

2509 

1595 

4437 

9111 

3837 

6393 

0901 





Mes 

sage G) 

1192 

6790 

2027 

6647 

6257 

3067 

3239 

3896 

8816 

9720 

7536 

2893 

6013 

6629 

1982 




Message D) 

66if6 

7609 

2343 

8228 

9953 

0862 

3070 

1519 

8511 

4885 

2234 

6815 

1316 

5899 

2966 

1156 

8706 

9994 

7351 





Message E) 

9282 

5121 

2058 

3611 

6828 

3547 

9974 

6039 

0323 

4545 

7333 

7187 

6632 

5899 

7691 

0892 

6514 

9520 

1350 

3353 

8515 

9347 







Message p) 

0939 

1A40 

0207 

5212 

1240 

5664 

O864 

9579 

3368 

6076 

2326 

5556 

4282 

4105 

8848 

3517 

0615 

5212 






Re cypher: 

0358 

1069 

5664 

8549 

7299 


6717 

1638 

0792 

0618 

0159 

2289 

8281 

0619 

21 24 

6553 

9992 

7002 

2280 

0501 

7617 

6074 

5629 

6946 

5754 

3677 

7614 

5302 

4393 

1631 

2972 

7674, 

6726 

7153 

0093 

3459 

1230 

5540 

5841 

4571 ' 

6659 

3612 

6603 

1521 

3818 

0115 

5862 

1121 

4894 

8047 

4637 

8724 

4239 

1717 

9481 

1940 

7252 

7592 

5205 

1333 

3860 

3529 

4336 

4894 

1063 

4365 

2757 

4114 

0052 

8493 

6060 

1323 

4464 

3260 

0750 

8873 

5241 

7794 

9788 

9845 

1959 

2848 

0704 

1773 

5501 

1603 

1034 

7622 

7978 

66 37 

7335 

6380 

7003 





